malware family

SynAck

unknownentity:malware_familyransomware · 1 source

The ransomware does not use a customized desktop wallpaper to signal its presence, and the only way to discover that SynAck has infected your PC is by the ransom notes dropped on the user's desktop, named in the format: RESTORE_INFO-[id].txt. For example: RESTORE_INFO-4ABFA0EF.txt

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: synack
kind: malware family
status: unknown
aliases: Syn Ack
jurisdictions: —
claims naming it: 497 · 0 attributions · 0 relations · 0 events

Identifiers

attack S0242via mitre-attack
misp-galaxy 04585cd8-54ae-420f-9191-8ddb9b88a80cvia misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 20 of 497

SynAckransomwarepayment
subjecttransaction954aa54154…e9b55ef0d0
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 26,445 sat · time 2015-03-29 16:02 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3030btcintel:annotations:3030@v3 sha256:4bf9cf0af7d058c9
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction55b4b5d9e3…e896fa029d
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 64,125 sat · time 2015-04-05 16:35 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3029btcintel:annotations:3029@v3 sha256:89d2e9727607c352
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction50a92d147f…30e1608da4
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 45,203 sat · time 2015-04-12 18:10 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3028btcintel:annotations:3028@v3 sha256:07ddc280cb641c3d
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactionae7dcd5c18…c220f50e64
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 50,211 sat · time 2015-04-19 18:51 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3027btcintel:annotations:3027@v3 sha256:badf34fc7c3d4d98
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction8bea18e04e…503417e830
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 34,689 sat · time 2015-04-26 16:37 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3026btcintel:annotations:3026@v3 sha256:337b683021592a69
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactiona4ceccce28…22d841b954
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 7,159 sat · time 2015-06-07 16:18 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3025btcintel:annotations:3025@v3 sha256:57da2374389f3d05
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction5c2aad3265…d6a48b9684
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 49,022 sat · time 2015-06-21 17:07 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3024btcintel:annotations:3024@v3 sha256:8ff4f690fcc07628
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction5e1908b056…9217c5b235
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 21,391 sat · time 2015-06-28 17:18 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3023btcintel:annotations:3023@v3 sha256:3329d3505e9818db
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction2565e68394…d3ae1ce46e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 5,836 sat · time 2015-07-05 16:25 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3022btcintel:annotations:3022@v3 sha256:b6dc97ed77ee41d0
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction560a11d51b…deb3a0da5e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 7,378 sat · time 2015-08-09 16:27 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3021btcintel:annotations:3021@v3 sha256:5ec68cd1f8a10226
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction02b2e30dbf…baad4109ec
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 6,873 sat · time 2015-08-23 15:45 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3020btcintel:annotations:3020@v3 sha256:8ddd05c46b45d2eb
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction7778913cb7…e2bbf2428d
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 24,120 sat · time 2015-10-04 15:33 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3019btcintel:annotations:3019@v3 sha256:feacc58a95432f0f
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactiona03eafc9d3…fe28e71d43
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 10,302 sat · time 2015-10-11 15:22 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3018btcintel:annotations:3018@v3 sha256:03e63a125f783f44
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction7f067ac6a3…dc4df9651d
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 14,404 sat · time 2015-10-25 17:17 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3017btcintel:annotations:3017@v3 sha256:7ab67258f4d1c3f5
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactiond685361c0e…e45c7d7f05
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 25,725 sat · time 2015-11-08 16:12 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3016btcintel:annotations:3016@v3 sha256:b200ffe7c02efdb2
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactiona60d749da1…0209be155a
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 10,744 sat · time 2015-11-15 15:34 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3015btcintel:annotations:3015@v3 sha256:a2a843863ffe46d3
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactionea562713c1…b1f04b9546
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 10,986 sat · time 2015-11-30 04:08 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3014btcintel:annotations:3014@v3 sha256:c93d56f341fcad49
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction114507b484…baebfd67b0
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 10,836 sat · time 2015-12-13 15:55 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3013btcintel:annotations:3013@v3 sha256:9c040dc460311340
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransactiondc76cc0343…0b818b11e5
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 1,281,400 sat · time 2016-03-24 11:39 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3012btcintel:annotations:3012@v3 sha256:e20532c20853fd6d
confidencetrusted provider · 50
SynAckransomwarepayment
subjecttransaction4f5a3db5cd…a7e84c30d8
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj · 1,603,600 sat · time 2016-03-25 18:34 UTC · url https://ransomwhe.re/#address/15n6gV8QUBsy2yh7wqLppWG4Fw4gsUTNAj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3011btcintel:annotations:3011@v3 sha256:5a163cbf27d0fe89
confidencetrusted provider · 50

Subjects497 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.